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FOREWORD 
SECTION 4 


The Guidance System Operations Plan (GSOP) for Program 


SKYLARK 1 is published in five sections as separate volumes: 


. Data Links 

Digital Autopilots 
Operational Modes 

Guidance Equations 

. Erasable Memory Programs 
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Since the information in Section 1 of the Colossus 2E GSOP is 
also applicable to the SKYLARK Program, Section 1 will not be re- 
published for SKYLARK. The reader is referred, therefore, to R577 
Colossus 2E GSOP, Section 1, Revision 2, January 1970. Also, 
Section 6 will not be published for SKYLARK. 


With this issue, Section 4 is revised from the previous issue 
of SKYLARK 1 (August, 1971), in order to reflect the 
NASA/ MSC -approved changes listed on the ''Revision Index Cover 
Sheet" at the beginning of this volume. | 


This volume is published as a control document governing 
operational modes for SKYLARK 1, including GNCS interfaces with 
the flight crew and MCC. Revisions constituting changes to the 
SKYLARK 1 Program require NASA approval. 
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4, GNCS OPERATIONAL MODES 
4.0 Introduction 


Preparation of the GNCS for any mission involves the generation of compu- 
ter programs, flight and ground crew procedures, and the provision of hardware 
to meet interface, accuracy, and instrumentation requirements. All of these 


mission-related items are specified in the Guidance System Operations Plan. 


The guidance operational concept is designed to comprise a set of manually- 
initiated programs and functions which may be arranged by the flight crew to 
implement a large class of flight plans. This concept of operation will permit 


both a late flight-plan definition and a capability for real-time flight-plan changes. 


The GNC System is designed to perform the CM guidance and navigation 
functions required in a self-contained mode within specified accuracy and man- 
euver propellant constraints. The System is also designed to accept navigation 
data from earth-based facilities whenever required to improve accuracy, to 
reduce maneuver propellant requirements, or to gain some other operational 


advantage. 


4.1 AGC Program Control - 


To efficiently coordinate the design of the AGC* Programs, as well as 
define the astronaut and ground control procedures with respect to the GNC system, 
it is necessary to define the operating inter-relationships between the GNC system, 


other S/C systems, the astronauts and the ground. 


In primary GNCS control modes the AGC can automatically compute required 
mission parameters and automatically command both GNCS and CSM subsystems, 
Complete automation of this control throughout a mission is neither feasible nor 
desirable. For primary as well as secondary GNCS control modes the astronauts 
and/or the ground must be capable of initiation or termination of AGC Programs. 
These procedures must be thoroughly defined to permit the design of the AGC 


Program logic for astronaut/ ground participation. 
4,1.1 AGC Program Initiation 
4.1.1.1 AGC Programs 


Due to the random time sequencing of many of the AGC tasks the design of 
Programs capable of being utilized at varied times and in varied circumstances 
offers the best method of accomplishing these tasks. These Programs must 
incorporate sufficient logic to clearly define the particular time and/or application 
for which they are to be used, They must also standardize astronaut/AGC 
communication procedures, ground/AGC communication procedures and GNCS 
and SCS Mode determination, 


A logical arrangement of these Programs has been supplemented by simpler 
routines not requiring identification as Programs. The programs, and their 
associated routines are outlined in detail in Section 4. 4. 


When a single program is in process in the AGC, its program number is 
displayed in the Program lights on the DSKY. When more than one program is in 
process at the same time, the program which is making primary use of the DSKY 
will be displayed. There are three cases of dual program operation: programs with 


P20 in background, P27 with P00, P02or P20in background, and P03 with P02 in back- 


ground. 
The AGC is programmed to initiate a Program only in response to the initia- 


tion of a specific mission task and will continue the programmed sequence of com- 
putations and displays for the specific task until Program completion or termination. 


Programs are generally initiated by manual keyboard entry (astronaut) or by 
AGC UPLINK command (ground). In certain cases Program initiation is automatically 
performed by the preceding Program. The diagrams of Section 4.4 show Program 
selection as it should occur normally. 
Si a 


_ “AGC is an acronym for Apollo Guidance Computer. In the CSM, this computer is 
officially designated as the CMC (CM Guidance Computer). 


4-2 


4.1.1.2 Special AGC. Routines 


In addition to the AGC Programs there are many routines and subroutines 
not specifically identified with a Program. The majority of these are automati- 
cally performed in a particular computation or control sequence and involve no 
notification to the "outside world'' that they are in process, While they may occa- 
sionally be referred to in this document their large number requires that detailed 
descriptions be restricted to special AGC program documents. 

Several special routines are described in detail herein because of one or 
more of the following characteristics: 

(a) The routine involves AGC communication with the astronaut, 

(b) The routine is of importance in understanding the Programs. 


(c) The routine involves significant sequences of AGC /Astronaut action but 


could be performed while certain programs are in process, 


These routines include those automatically called by the AGC as well as 
those manually called, If the routine required AGC /astronaut communication, it 
will start with a particular display which acts as a key to the astronaut that the 


AGC has automatically entered the routine. 
4,1.2 AGC Program Termination 


Normally there are two ways by which an AGC Program in process is 


terminated: 


1, At completion, the program in process will transfer control to (a) the 
Final Automatic Request Terminate Routine (R00), (b) a subsequent 


Program, 


2, Via a terminate response by the astronaut to an AGC generated flashing 
display on the DSKY (usually results in transferring control to ROO). 


In addition to the above, the astronaut may terminate a particular AGC 


Program as follows: 
1. Select a new Program to operate via the DSKY. 


2. Select a routine via the DSKY which has been specifically designed to 


terminate a particular program or activity (e.g. state vector integration). 


3. Select the FRESH START routine which essentially initializes the AG, 
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4,2 AGC/Astronaut/Ground Communications 
4.2.1 AGC/Ground Communications 


The AGC/Ground Communications are via the AGC UPLINK and AGC DOWN- 
LINK and are described in detail in Section 2 of the GSOP. 


4.2.2 AGC/Astronaut Communications 


The display and keyboard logic in the AGC processes information exchanged 
between the AGC and the computer operator. This information is exchanged via the 
display and keyboard (DSKY). 


The modes of operation are basically: 


(a) Display of internal data - This includes simple displays and periodi- 
cally updated displays of data; and displays of requests for operator 
action required by the AGC. 


(b) Loading of external data - the process of inserting data into the AGC 
via the DSKY. 

(c) Program or Routine calling - Initiated by operator action via the 
DSKY. 


The following paragraphs and Table 4-1 (page 4-18) provide a limited des- 
cription of the DSKY, and the crew/DSKY operating procedures, They are included 
herein to facilitate understanding of the Program logic in Section 4.4 and do not 
comprise a complete instruction manual for the use of the DSKY. For detailed 
DSKY operating instructions refer to other MIT documents. 


4.2.2.1 The DSKY (refer to Figure 4-1 page 4-19) 


(a) UPLINK ACTY Light 


1. is energized by the first character of a digital UPLINK message 
received by the AGC. If the light is not extinguished by the 
UPLINK transmission it should be extinguished by crew use of the 
RSET or KEY REL buttons when the UPLINK transmission is 
complete. 


2, is energized during the Universal Tracking program (P20) when 
the tracking attitude routine (R61) detects that the 10° test has 
failed (see Section 3. for criteria), that HOLDFLAG is not 
positive non-zero, and that the V50N18 Flag is not set. 


(b) NO ATT Light - is energized when the AGC is in operate mode and 
there is no inertial reference; i.e, the ISS is caged or in the 


coarse align mode, 


(c) STBY Light - is energized when the AGC is in standby mode and 


deenergized when the AGC is in operate mode. 


(d) KEY REL Light 


(1) Energized when: 


(a) An internal display comes up while astronaut has the 


(b) 


(c) 


DSKY. 

An astronaut keystroke is made when an internal flash- 
ing display is currently on the DSKY. (Note three excep- 
tions: PRO (proceed), RSET (reset) and ENTR (enter) if 
ENTR is a single button response. ) 

The astronaut makes a keystroke on top of (his own) 
Monitor Verb display. This is the so-called "suspended 
monitor'' case. (Monitor Verbs display data updated 


every one second.) 


(2) De-energized when: 


(3) Some special DSKY cases that may not be universally appreciated 


Revised 
{_] Added 


(a) 


(b) Astronaut terminates his current sequence normally, e.g. 


are: 


(a) 


(b) 


Astronaut relinquishes DSKY by hitting KEY REL button. 


i) with final ENTR of a load sequence. 
ii) the ENTR of a response to a flashing display. 
iii) the ENTR of an extended verb request. 


The astronaut may select a non-Monitor Verb display on 
top of his own previously selected Monitor Verb. This 
will cause KEY REL light to flash (See 1 (c) above). 
Hitting the KEY REL button will bring back (unsuspend) 
the monitor and extinguish the light. However, if these 
sequences are selected on top of an internal display, the 
KEY REL light will not go out as the monitor is unsus- | 
pended. It requires one more KEY REL button operation 
to extinguish the light and bring back the internal display. 


Suppose the astronaut selects another verb-noun combina- 


tion (e.g. a V16 monitor) on top of an internal flashing 
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display. That internal display can still be answered with 

a PRO or VERB 34 ENTR (terminate), which wipes every- 
thing from the DSKY till the next internal display. There- 
fore, an astronaut selected monitor should, as a rule, never 
be terminated with VERB 34 ENTR, because that may not be 
the desired response to the flashing display. The KEY REL 
button should be used instead. 


(e) TEMP Light - the AGC receives a signal from the IMU when the stable 
member temperature is in the range 126. 3°F to 134. 3°F. In the absence 
of this signal, the TEMP light on the DSKY is actuated. 


(f) GIMBAL LOCK Light - energized when the middle gimbal angle exceeds 
+70° from its zero position. When MGA exceeds +85° the ISS is down- 
moded to Coarse Align and the No Attitude lamp on the DSKY is actu- 
ated except during Average-G when the "'config'' window of DAPDATR1 
indicates Saturn configuration. 

(g) PROG Light - The program alarm actuates the PROG light on the DSKY. 
A program alarm is generated under a variety of situations. For 
further information relative to program alarm see Sections 4,3,3 and 
4,3.4, 


(h) TRACKER Light 
1. Failure within the optics CDUs generates a fail discrete (Optics 

CDU Fail) which is an input to the computer. The TRACKER light 
is energized by this error signal. The discrete will be set if any 
or all of the following conditions in either OCDU exist for approxi- 
mately 2-10 seconds. 

CDU fine error - in excess of 1.0V rms 

READ COUNTER limit cycle ~- in excess of 160 cps 

COS (@ - $) - below 2.0V 

+14 VDC supply - decrease to 50% of normal level 


a oOo DF DP 


2. In addition to the conditions described in (1.) the TRACKER light 
is energized when the VHF Range Read Routine (R08). 
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f : 
reads VHF Range data via the VHF DATA link but the DATA GOOD 
DISCRETE is missing. R08 is called by the rendezvous tracking 
data processing routine (R22) and the VHF range rate mark 
processing routine (R27). 
3. It is de-energized if the DATA GOOD DISCRETE is present 
after reading VHF Range data and by keying in V88E. 


It is also de-energized if the conditions described in (1.) 


and (2.) do not exist. 


(i) OPR ERR Light - is energized when the DSKY operator performs an 
improper sequence of key depressions. The light is de-energized by 
pressing the RSET button. 


(j) COMP ACTY Light - is energized when the AGC is occupied with an 
internal sequence. It is not an indicator of whether the operator 
may use the DSKY or whether the AGC is not capable of handling 


further computation. 


(k) RESTART Light - in the event of Restart during operate a latch is — 
' get in the AGC which maintains the RESTART light on the DSKY 
until the latch is manually reset by pressing the RSET button. For 
further detail see section 4. 3.4. 


(1) Display Panel - consists of 24 electroluminescent sections arranged 
as in Fig. 4-1, page 4-19. Each section is capable of displaying 
any decimal character or remaining blank, except the 3 sign sections. 
These display a plus sign, a minus sign, or a blank. The numerical 
sections are grouped to form 3 data display registers, each of 5 
numerical characters; and 3 control display registers, each of 2 
numerical characters. The data display registers are referred to as 
R1, R2, R3. The control display registers are known as VERB, 
NOUN, and PROGRAM. 


At maximum activity, the complete display panel may be updated in 


approximately 1/2 second. 
(m) Keyboard - contains the following buttons: 


VERB - pushing the button indicates that the next two numerical 
characters keyed in are to be interpreted as the Verb Code, 


NOUN - pushing the button indicates that the next two numerical 
characters keyed in are to be interpreted as the Noun Code. 


+- and — -sign keys used for sign convention and to identify 
decimal data. 


O a Q Pamenieel keys. 


CLR - used during a data loading sequence to clear or blank the data 
display register (R1,R2,R3) being used. It allows the operator to 
reload the data word. 


PRO - this pushbutton performs two functions: 


1. When the AGC is in a standby mode, pressing this button will 
put the AGC inthe operate mode, turn off the STBY light (see (c)), 
update CMC time counter, and select Routine 00 inthe AGC. 

2. When the AGC is in the operate mode but Program 06 is not 
selected, pressing the button will provide the proceed 
function. Proceed directs the AGC to continue to the next 
programmed event, In response to an AGC request it further 
indicates crew compliance with the request. If the PRO 
button is pressed when the VERB lights contain verb 21, 22, 
or 23, the button is rejected and the OPR ERR light is energized, 


2a. When the AGC is in the operate mode and Program 06 is 
selected, pressing the button will put the AGC in the standby 
mode and turn on the STBY light (see (c) ). 


KEY REL - releases the DSKY displays initiated by keyboard action so 
that the DSKY is available for displays generated by the AGC program. 


ENTR - is used in three ways: 


1. To direct the AGC to execute the Verb/Noun code now 
appearing on the Verb Noun lights. 


2. To direct the AGC to accept a data word just loaded. 


In response to a "please perform" request (see section 
4.2.2.7). 


reeee 


RSET - turns off PROG light, RESTART light, and OPR ERR light; also 
clears Rl and R2 of the NO9 registers containing the alarm code (FAILREG's). 
4.2.2.2. Verbs and Nouns 


The basic language of communication between the astronaut and the DBKY 
consists of Verb and Noun Codes. The.Verb Code indicates what action is to be 
_ taken. The Noun Code indicates to what this action is applied. 


Verb Noun codes may be originated either by manual operation or by the 
AGC Program in process, 
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The standard procedure for a manual keyboard operation consists of a 


sequence of 7 key depressions: 


VERB Vv, Vo NOUN N, No 


The VERB key depression blanks the Verb lights on the display panel and clears 
the Verb Code register within the computer. The next two numerical characters 


ENTR 


punched in are interpreted as the Verb Code. Each of these characters is displayed 
in the Verb lights on the display panel as it is punched in. The NOUN key operates | 
similarly for the Noun lights and Noun Code register. 


The depression of the ENTR key causes the performance of the Verb-Noun 
combination appearing in the lights at the time of depression, Thus it is not 
necessary to follow any order in punching in the Verb or Noun Code. They may be 
done in reverse order, or an old Verb or old Noun may be used without repunching 
it. | 

No action is ever taken in performing the Verb-Noun combination until ENTR 
is pressed. If an error is noticed in either the Verb Code or the Noun Code before 
the ENTR is pressed, correction is simple. Merely press the VERB or NOUN key 
and repunch the originally intended code, without necessarily changing the other. 
Only when the astronaut has verified that the desired Verb and Noun Codes are in 
the lights, should he press the ENTR key to execute the Verb-Noun combination, 


A Noun Code can refer to a group of computer erasable registers, a group 
of counter registers, or may serve merely as a label, A label Noun refers to no 
particular computer registers, but conveys information by its Noun Code number 
only. The group of registers to which a Noun Code refers may be a group of 1, 2 
or 3 members. These are generally referred toasl, 2, or 3 component Nouns, 
The component is understood as a component member of the register group to 
which the Noun refers. The machine addresses for the registers to which a Noun 


refers are stored within the computer in Noun tables, 


A single Noun Code refers to a group of 1, 2, or 3 compenent members. It 
is the Verb Code that determines which component member of the Noun group is 
operated on. Thus, for instance, there are 5 different Load Verbs. Verb 21 is 
required for loading the first component of whatever Noun is used therewith; 

Verb 22 loads the second component of the Noun; Verb 23, the third component; 
Verb 24, the first and second components of the Noun; and Verb 25 loads all three 
components of the Noun, A similar component format is used in the Display and 


Monitor Verbs. 


When the decimal Display Verb is employed, all the component members 
of the Noun being used are scaled as appropriate, converted to decimal, and 


displayed in the data display registers. 


Decimal data is identified by a+ or - sign preceding the numerical 
characters. If decimal is used for loading data of any component members of a 
multi-component Load Verb, it must be used for all components of the Verb. Thus | 
no mixture of decimal and octal data is permitted for different components of the 
same Load Verb. (If this is violated, the OPR ERR light is turned on. ) 


There is a class of verbs called Monitor Verbs which display data every 
one second, Once a Monitor Verb is executed, the data on the display panel 


continues to be updated until the Monitor is turned off,. 


The Monitor may be turned off by keying in: PRO, VERB 34 ENTR (terminate), 
VERB 32 ENTR (recycle), by internal program initiation of the Keyboard and Display 
System Program, (if the DSKY is not busy)or by a Fresh Start or Restart of the AGC, 

Monitor action is suspended (but not ended) by the depression of any key, 
except RSET, KEY REL, and ENTR. This turns on the KEY REL light immedi- 
ately. Monitor action continues after the Keyboard and Display System is released. 
Thus it is possible to suspend a monitor while the astronaut loads some data (or re- 
quests another display) and to return to the original monitor when his intervention 
is concluded. 

After any use of the DSKY, the numerical characters (verb, noun, and data 
words) remain visible until the next use of the DSKY. If a particular use of the 
DSKY involves fewer than 3 data words, the data display registers (R1, R2, R3) 
not used remain unchanged, unless blanked by deliberate program action. 


The DSKY procedures above were described for manual operation; however, 
the principles described remain the same for DSKY operation by the AGC Programs 


and routines. 


As outlined in the Mission Programs (section 4.4) the majority of DSKY 


operations are of the following categories: 


a) Display - to display data to the operator, Display Verbs present 
data computed by the mission program, 


b) Load - to request a data load as described in detail below. 


c) Please Perform - to request an action from the astronaut, 
(see section 4.2.2.7) 


d) Please Mark - to request the astronaut to push the "MARK" 
button for an optics sighting. ‘see section 4. 2. 2.8) 


AGC initiated Verb/Noun combinations are either statically displayed or flashed. If 
static they identify data displayed only for astronaut information requiring no response 
from him. If the Verb/Noun is flashing, appropriate astronaut response is required 
as dictated by the Verb/Noun combination. In this case the AGC Program or Routine. 
is interrupted until the astronaut responds appropriately, then the Verb/Noun flash is 
terminated and the Program or Routine is resumed. (In some cases, e.g. R31, 

and R34, the displays will. be continuously updated until the flash is terminated). 


An appropriate astronaut response to a flashing Verb/Noun should be a 
data load and ENTR, VERB 32 ENTR (recycle), PRO, or VERB 34 ENTR 
(terminate), The internal program response to any one of these astronaut res- 
ponses varies according to the Verb/Noun flashing and the Program in process as 


described below and in Section 4.4, 
4.2.2.3 Acceptance of Keys 


The numerical keys, the CLR key, and the sign keys are rejected if struck 
after completion (final ENTR) of a data display or data load Verb. At such time, 
only the VERB, NOUN, ENTR, RSET, or KEY REL are accepted. Thus the data 
keys are accepted only after the control keys have instructed the program to accept 


them, 


Similarly the plus (+) and minus (-) keys are accepted just before the first 


numerical character of Rl, R2, R3 is punched in, and at no other time. 


The 8 or 9 key is accepted only while defining a program number, a verb, a 
noun, or when loading a data word into Rl, RZ, or R3 which was preceded by a plus 
or minus sign. (If this is violated, the OPR ERR light is turned on. ) 


If more than two numerical characters are punched in while loading the 
Verb, Noun, or Program code in the noun register, or more than five numerical 
characters while loading a data word, the excess characters are not accepted, 


4.2.2.4 Release of Keyboard and Display System 


The Keyboard and Display System Program can be used by internal computer 
programs. However, any operator keyboard action (except RSET) makes the Keyboard 
and Display System Program busy to internal routines. The operator has control of the 
Keyboard and Display System until he wishes to release it. Thus he is assured that data 
he wishes to observe will not be replaced by internally initiated data displays. There are 
four cases in which the operator initiated normal displays will be replaced by internally 
initiated action. These are: in P40/P41 when the DSKY is blanked at T-35 seconds, in P20 
when DSKY is blanked during return from R60 to R61 at end of maneuver, when P63 is 
initiated from P62, and at lift off when P11 is initiated. In general, it is recommended 
that the operator release the Keyboard and Display System for internal use when he has 
temporarily finished with it. This is done by pressing the KEY REL button. 


If an internal program attempts to use the Keyboard and Display System, 
but finds that the astronaut has used it and not yet released it, the KEY REL 
light is turned on. When the astronaut finds it convenient, he should strike the 
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KEY REL button to allow the internal program to use the keyboard and display 
panel, 


4.2.2.5 Display - Verb/Noun Flashing 


This is an internally initiated action. The appropriate astronaut response 
to a flashing display Verb/Noun combination is: 


(a) Correct the data (see Section 4.2.2.6 below). Perform the appro- 
priate Load Verb sequence. Upon the final ENTR, the program 


proceeds normally. 


(b) VERB 32 ENTR (recycle). This causes the program to return toa 


previous location. 


(c) PRO. This indicates acceptance of the displayed data, and a desire 


for the internal sequence to continue normally. 


(d) VERB 34 ENTR (terminate). The astronaut wishes to terminate 


the operation, 


NOTE: Uncommon responses are defined in the program logic of 
section 4.4, 


4.2.2.6 Load - Verb/Noun Flashing 


Whenever any data is to be loaded the Verb/Noun flashes. The flash 
occurs whether the data load is initiated by the AGC or by the astronaut. The 
appropriate data display register (Rl, R2, or R3) is blanked in anticipation of the 
data load, Data is loaded in 5-character words and is displayed character-by- 


character in one of the 5-position data display registers as it is keyed in. 


Numerical data is considered decimal if the data word is preceded by a 
plus or minus sign; if no sign is supplied it is considered octal. The plus and 
minus keys are accepted only when they precede the first numerical character 
of the data word; they are ignored at any other time. Both decimal and octal 
data may be loaded with high order zeros suppressed. If decimal is used for 
any component of a multi-component Load Verb, it must be used for all com- 
ponents of that Verb. No mixing of octal and decimal data is permitted for 
different components of the same Load Verb. (If this principle is violated, 
the OPR ERR light is turned on. ) 


The ENTR key must be pressed after each data word. This tells the 
program that the numerical word punched in is complete. The flash is turned 
off after the last ENTR of a loading sequence. 


ae 


As data is loaded, it is temporarily stored in buffers. It is not placed into 
its final destination, as specified by the Noun Code, until the final ENTR of the load 


sequence. 


If an attempt is made to key in more than 5 numerical characters in 
sequence, the sixth and subsequent characters are simply rejected, If the 8 or 9 
key is punched during octal load (as identified by lack of a sign entry), it is 
rejected and the OPR ERR light is turned on. 7 ; 


In multi -~component load situations, the appropriate single component Load 
Verbs are flashed one at atime. The computer always instructs the astronaut . 
through a loading sequence, For example: the astronaut (or the internal program) 
initiates the sequence by selecting VERB 25, "load 3 components of:" (any 3- 
component noun will do). The Verb Code is changed to 21, "load first component 
of:" and the flash is turned on. VERB 21 continues to be flashed as the astronaut 
punches in the first word of data. When the. ENTR is pressed, the Verb Code is 
changed to 22, Flashing continues while the astronaut punches the second data 
word, When ENTR is pressed, the Verb Code is changed to 23, "load third 
component," and again the flash continues while the third data word is punched in, 
When ENTR is pressed, the flash is turned off, and all three data words are 
placed in the locations specified by the Noun, Throughout the changing of the 
Verb Codes, the Noun Code is left unchanged. | 


The CLR button is used during data loading to remove errors in Rl, R2, or 
R3. It allows the astronaut to begin loading the data word again, It does not clear 
the Program, Noun, or Verb lights. (The Noun lights are blanked by the NOUN 
key; the Verb lights, by the VERB key.) In the following discussions, the term 
Clearing Function will be used to mean blanking the data display register, 


For single component Load Verbs, the CLR button depression performs the 
- Clearing Function on whichever register is being loaded, provided that CLR is 
punched before data ENTR. Once ENTR is depressed, CLR does nothing. The 
only way to correct an error after the data ENTR for a single component Load 


Verb is to begin the Load Verb again, 


For the 2- or 3-component Load Verbs, there is a retrograde sequencing 
feature of CLR. The first depression of the CLR button performs the Clearing 
Function on whichever register is being loaded, (CLR may be pressed after any. 
character, before its ENTR,) Consecutive depressions of CLR perform the 
Clearing Function on the data display register preceding the current one, and also 
change the VERB light to indicate the register being acted upon until R1 is cleared, — 
Any attempt to back up beyond R1 is simply ignored. 


The retrograde sequencing of CLR operates only on data pertinent to the 
Load Verb which initiated the loading sequence. For example, if the initiating 
Load Verb was a load second component only, no backing-up action is possible. 


4.2.2.7 Please Perform - Verb/Noun Flashing 


This is always an internally initiated action, as astronaut response is 
always required to the "please perform" request; the Verb-Noun is always 
flashed, and the Program is interrupted. The "please perform" verb (50) is 
usually used with the "Checklist" noun (25) with an appropriate "checklist code" 


number in Rl. The appropriate response is: 


(a) PRO to indicate an affirmative response to the request. 
(b) ENTR to indicate a negative response to the request. 


4.2.2.8 Please Mark 


The "please mark' verbs (51 and 53) are flashed when the AGC is prepared 
to accept optical sighting data upon the pushing of the ''MARK" button and ENTER 
button, respectively. The logic associated with the ''please mark" function is com- 
pletely described in Section 4.4. Marking is also allowed during P20 option 0, 4 


without the presence of a please mark verb. 
4.2.2.9 Machine Address to be Specified 


There is a class of Noun available to allow any machine address to be used, 
These are called ''Machine Address to be Specified" Nouns. When the ENTR which 
causes the Verb-Noun combination to be executed senses a noun of this type, R3 is 
blanked and the flash is immediately turned on, The Verb Code is left unchanged. 
The astronaut should load the 5-octal-character complete machine address of 
interest. It is displayed in R3 as it is punched in, If an error is made in loading 
the address, the CLR may be used to remove it. Pressing ENTR causes the verb 
to be executed. 


4.2.2.10 Program Selection 


VERB 37 ENTR is used to select a Program. The ENTR causes the Noun display 
register to be blanked and the Verb Code to be flashed. The 2-character Program 
Code would then be loaded. For verification purposes, it is displayed as it is 
loaded in the Noun display register. The ENTR causes 1) the noun register to be 
blanked and the 37 remaining in the verb register to be non-flashing, 2) a request 
for the new Program to be entered, and 3) the new Program Code to be displayed 
(if allowed) in the Program display register. 


4.2.2,11 Alarm Philosophy 


The OPR ERR light is turned on when the astronaut performs some improper 
sequence of key depressions. | 


4,.2,2,12 Illegal Verbs, ‘Nouns and Gombinations 


The simplest alarm situation is an attempt to use an undefined (or spare) 
Verb Code or Noun Code. The OPR ERR light is turned on when the ENTR that 
attempts to execute the Verb/Noun combination is pressed, No further action is 


taken, 


It is possible to choose a Verb that is defined and a Noun that is defined, 
but have the combination of Verb and Noun be illegal (for example, the "decimal 
display'' Verb used with a Noun which is restricted to be ‘octal only"). The OPR 
ERR light is turned on at the ENTR that attempts to execute the Verb/Noun combin- 
ation for display verbs and at the ENTR following the final data load for load verbs.. 


No further action is taken. 


Violation of the following principles causes the OPR ERR light to be turned 


on, No further action is taken. 


(a) An undefined (or spare) verb must not be used. 
(bo) An undefined (or spare) noun must not be used. 
(c) In octal Display and Monitor Verbs arid all Load verbs, the components 
number of the verb must not exceed the number of components in the 
noun. (Note, all ''machine address to be specified" nouns are considered 
3 component. ) a | | 
(d) The octalDisplay and Monitor Verbs must not be used with a decimal 
only" noun. | 
(e) The decimal Display and Monitor Verbs must not be used with an "octal 
only" noun. 
(f) The double precision decimal Display and Monitor Verbs (07, 17) must 
not be used with mixed nouns (codes 40-99). 
(g) No Load Verb (except V21, V22 and V23) may be used with a noun restricted 
| to be "no load". All nouns having split MIN/SEC scale or 2 integers for any 
component are "no load" for the entire noun. | 
(h’ No input code other than those which are defined may be punched into the 
keyboard, 


4.2.2.13 Illegal Data and Recycle 


Many legal Verb/Noun combinations require the loading of additional data 
(either numerical or machine address). It is possible that the data supplied may 
itself be improper for the Noun selected. Examples are: (1) the numerical data 
exceeds the maximum value allowed by the scale factor associated with the Noun, 
and (2) decimal data is loaded into an "octal only" noun. 


In general the offense is detected at the final ENTR of the loading sequence. 


~ 


The alarm is turned on and a recycle is performed back to the beginning of the 


loading sequence. The flash is left on, and the data display register associated 


with the first data word in the sequence is blanked again, It is necessary for the 


astronaut only to supply the data again; he need not attempt to re-execute the 


Verb/Noun combination, (Note, if decimal data is supplied for the address of a 


"machine address to be specified" noun, the alarm and recycle are performed at 


the ENTR immediately following the address keyed in, ) 


Violation of the following principles causes the OPR ERR light to be turned 


on, and a recycle to be performed. 


(a) 
(b) 
(c) 


(d) 
(e) 


(f) 
(g) 


(h) © 


(i) 


The address keyed in for a "machine address to be specified" noun 


must be octal, 


In multicomponent load verbs, no mixing of octal and decimal data is 
permitted. All the data words loaded for a given noun must either be 
all octal or all decimal, 


Octal data must not be loaded into a "decimal only" noun. 
Decimal data must not be loaded into an "octal only" noun, 


Decimal data loaded must not numerically exceed the maximum per- 
mitted by the scale factor associated with the appropriate component 
of the noun. 


Negative decimal data must not be loaded using the Y optics scale. 


All 3 words must be loaded for the Hours, Minutes, Seconds scale. 


When loading with the Hours, Minutes, Seconds scale, the minutes 
must not exceed 59; the seconds must not exceed 59. 99; and the total 


magnitude must not exceed 745 hours, 39 minutes, 14.55 seconds. 


Two numerical characters must be supplied for the Program Code 
under. V37. 


4,2.2,14 Operator Error and Key Rejection 


There are five situations which cause the OPR ERR light to be turned on 
and the offending key depression to be simply rejected. These are: 


(a) 


(b) 
(c) 


(a) 


(e) 


An 8 or 9 is punched while loading a word which was not preceded by a 
plus or minus sign, The 8 or 9 is simply rejected. The remaining 
characters may then be supplied or the offending word removed and its 
loading begun again. 


Certain program controlled cases (see Section 4.4). 


An attempt to call an extended verb on top of a priority display or an 


attempt to call an extended verb with displays on top of another extended 


verb with displays without allowing proper termination of the first. 


The PRO button may not be pressed when the VERB lights contain VERB. | 


21, 22, or 23. 
Neither V30E or V31E can be called if R1 of N26 is zero. 
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Fig. 4-1 Display and Control Panel 


4.3 GNCS Failure Monitor 


The GNCS performance and operational readiness are self -monitored and 
caution and warning information are displayed to the crew. Two warning (red) 
lamps are actuated by the GNCS on the Caution/Warning Panel: AGC Warning 
indicates computer failure; ISS warning indicates failure of the inertial subsystem. 
Also a GNCS Caution (amber) light is actuated to indicate non-critical problems 
in the system. Further detail regarding the caution items is displayed by means 
of the DSKY event lamps and the DSKY data registers (in the event of a program 


alarm), 


4.3.1 AGC Warning 


An AGC warning alarm is generated in the event of AGC power failure, 
scaler failure of either of two types, restart or counter failure during AGC 
operate, or in response to an alarm test program. A scaler fail or prime 
power fail result in an immediate alarm indication whereas the other inputs are 
buffered by a filter so as to prevent transient disturbances from causing a warn- 
ing alarm. In this subsection the various inputs and conditions associated with 


AGC warning are defined. 


(a) SCAFAL - Occurs if scaler stage 17 (1.28-sec, period) fails to produce 
pulses. This provides a check on the timing for all logic alarms. 


(b) COUNTER FAIL - Occurs if counter increments happen too frequently 
or else fail to happen following an increment request. ‘Too frequently" 
means continuous counter requests and/or incrementing for from 0.625 
to 1.875 ms. | 


(c) SCADBL - Occurs if the 100 pps scaler stage operates at a pulse rate 
of 200 pps or more. 


(qd) PARITY FAIL - Occurs if any accessed word in fixed or erasable 
memory whose address is octal 10 or greater contains an even number 


of "ones". 


(e) RUPT LOCK - Occurs if interrupt is either too long or too infrequent. 
The criterion for "too long" is phase dependent, varying in duration 
from 140 ms. to 300 ms, Likewise the criterion for 'too infrequent" 


varies in absence from 140 ms to 300 ms, 


(f) TC TRAP - Occurs if too many consecutive TC or TCF instructions 
are run or TC or TCF instructions are too infrequent. The criterion 
for "too many" varies in duration from 5 ms to 15 ms, The criterion 


for ''too infrequent" varies in absence from 5 ms to 15 ms. 


(g) 


(h) 


(i) 


(j) 


NIGHT WATCHMAN - Occurs if'the computer should fail to access 
address octal 67 within a period whose duration varies from 0.64 sec. to 


1.92 sec, 


»eee 


V FAIL - Occurs if the AGC voltages (28, 14, 4) are out of limits. 
This signal produces STRT1 if it stays on for a period of between 

157 and 470usec. If the computer is in the STANDBY mode, an 
input to the AGC WARNING FILTER is generated simultaneously with 
STRT1., The following criteria apply for V FAIL: 


4V Supply > 4.4 V 14 V Supply> 16 V 
4V Supply < 3.65V 14 V Supply < 12.5V 
28 V Supply < ~22,6V 


STANDBY - This is a signal which turns on RESTART and turns off the 
switchable +4 and +14 voltage, thus putting the AGC into a low power 
mode where only the scaler, timing signal, and a few auxiliary signals 
are operative. STANDBY is initiated by first setting the ENABLE 
STANDBY outbit (CH13 B11), and then pressing the PRO button on the 


DSKY for a time which varies from 0.64 sec.to 1.92 sec. at the end of 


_which time the STANDBY light is turned on, (All AGC alarms are 


inhibited during the Standby mode with the exception of AGC WARNING, 
which can be caused by VOLTAGE FAIL or SCALER FAIL; and TEMP- 
ERATURE CAUTION, which can be caused by TEMP ALARM.) Normal 


operation is resumed by pressing the PRO Button on the DSKY again, 


time of depression same as above, 


RESTART - RESTART occurs at next time 12 following occurrence of 
any one or more of the following parameters: Rupt lock, TC Trap, 
Night Watchman, parity fail, and Standby as described above. 


RESTART occurs immediately and forces time counter to 12 upon occur- 
rence of OSCILLATOR FAIL, (See paragraph (1) below.) 


RESTART causes the computer to transfer control to fixed memory 
address 4000, as soon as it disappears. It sets a flip-flop which lights 
the RESTART CAUTION lamp in the DSKY. 


ee290e0e00 


The flip-flop is reset either by the ALARM RESET hard-wired signal or 
by the CAUTION RESET outbit CH1i1 B10. ALARM TEST operates the 
lamp but not the flip-flop. 


[xk] Revised SKYLARK 1 PCN# 489 
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(k) WARNING FILTER - This circuit is used to operate the AGC WARNING 
output following repeated or prolonged occurrences of any. of certain 
parameters. All occurrences of these signals are stretched so that no 
more than one input to the filter is generated in each 160-millisecond 
period, Approximately six consecutive stretched pulses cause AGC 
WARNING to turn on for about 5 seconds, Non-consecutive stretched 
pulses may also cause AGC WARNING after an interval dependent on 
the frequency of the pulses. The output will not occur if input pulses 
occur at a frequency of less than 0.9 pps; and the output will remain on 
if pulses occur at a frequency of 0.6 pps or more, The threshold of 
the filter resumes its normal level with a time constant of many seconds 
after the filter has received inputs. An immediate reset of the AGC 
WARNING due to a WARNING FILTER output is therefore not possible. 


(1) OSCILLATOR FAIL - Occurs if the oscillator stops. Has nominal 
250-millisecond delay to keep signal present after the oscillator starts. 
Also occurs when AGC is in STANDBY because of loss of power to front 
end of circuit, This results in a 250-millisecond delay in starting 
when AGC comes out of STANDBY into OPERATE and causes an 
immediate restart without waiting for time pulse 12, 


4.3.2 ISS Warning 


The ISS Warning signal is the logical ''OR" of the following parameters, any 


one of which will cause an ISS Warning under the following conditions: 


(a) IMU Fail 
(1)IG Servo Error - greater than 2.9 mr for 2 sec 
(2) MG Servo Error - greater than 2.9 mr for 2 sec 
(3)OG Servo Error - greater than 2.9 mr for 2 sec 
(4) 3200 cps supply - decrease to 50% of normal voltage level 
(5) 800 cps wheel supply - decrease to 50% of normal voltage level 


These parameters are generated in the Inertial Subsystem. However, the 
"WARNING" signal itself is under AGC program control. It is ignored by the AGC 
program when the G&N system is in the Coarse Align Mode and during the 5-second 


interval following Coarse Align. During this mode the servo errors normally exceed 
the above criteria. 


(b) PIPA FAIL 
Pipa fail occurs if no pulses arrive from a PIPA during a 312. 5-microsec 


period, or else if both plus and minus pulses occur, or if a "long 
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(c) 


- time'' elapses without at least one plus pulse and at least one minus 


pulse arriving. By "long time" is meant a period between 1.28 sec.and 


3.84 sec. 


This FAIL signal is generated totally within the AGC and thus is com- 
pletely under AGC program control, Its generation is enabled by the 


AGC only during AGC controlled translation or thrusting maneuvers. 


ISS CDU FAIL (Monitored for each of 3 CDU's) Set if any or all of the 
following conditions exist for approximately 2-10 sec. 


(1) CDU fine error - in excess of 1.0 V rms 

(2) CDU coarse error = in excess of 2.5 V rms | 
(3) READ COUNTER limit cycle - in excess of 160 cps 
(4) Cos (@-¢ ) - below 2.0 V | 

(5) +14 VDC Supply - decrease to 50% of normal level 


These parameters are generated in the Inertial Subsystem. However the 


response to the ''FAIL" signal itself is under AGC program control. It is 


ignored by the AGC program for about 8 seconds after the CDU Zero Mode 
has been commanded. During this Mode the CDU errors normally exceed 
some of the above criteria. 


4.3.3 GNCS Caution 


The GNCS Caution lamp is actuated by the following undesirable and non- 


critical events: 


(a) 


(b) 


(c) 


CMC Restart during operation. In the event of Restart during operate 
a latch is set in the CMC which maintains the GNCS Caution alarm and 
the RESTART lamp on the DSKY until the latch is reset by the program or 
until the latch is manually reset by pressing the RSET button. For further 


detail see section 4.3.4. 


Temperature out of Limits. The CMC receives a signal from the IMU 


when the stable member temperature is in the range 126.3°F to 134.3°F, 


In the absence of this signal, the Caution alarm and the TEMP lamp on 


the DSKY are actuated. 


Gimbal Lock. When the CMC determines that the middle gimbal angle 
(MGA) of the IMU is greater than 70°, the Caution alarm and the Gimbal . 
Lock lamp on the DSKY are actuated. When MGA exceeds 85° the ISS 

is. downmoded to Coarse Align and the No Attitude lamp on the DSKY is — 


actuated except during Average-G when the ''config'' window of 
DAPDATR1 indicates Saturn configuration. - 


4-23 


(d) Program Alarm, Under a variety of situations a program alarm is 
generated. One example is that of a PIPA fail when the vehicle is 
not in a thrusting mode, Under program control the CMC inhibits 
this program alarm for 10 sec. after system turn-on. The program 
alarm actuates the Caution alarm and the Program light on the DSKY. 
For further information see Section 4, 3. 4, 


4.3.4 Restart and Program Alarms 
Program Alarms 


1. Alarm conditions are indicated by lighting the PROG ALARM light and 
storing the appropriate alarm code so that it may be examined by keying 
VO5NO9E. In some special cases VOSNO09 is automatically displayed. The 
light is turned off and R1, R2 of NO9 are cleared by pressing the RSET button. 


For non-ABORT alarm conditions the normal program flow is not interrupted. 


2. The ABORT type of alarm conditions preclude continuation of normal 
program flow; in these special cases recovery from the condition is accom- 
plished by the software by means of a ''software restart". These ABORT 


conditions are divided into two classes: 


a. "BAILOUT" alarms, designated by a five-digit alarm code with 3 
as the first digit, e.g. 31201. 


These alarms cause suspension of non-restartable program activity 
and continuation of only that program activity which is restartable. 
This type of alarm condition is generally due to temporary overloading 
of the system; the BAILOUT procedure will relieve the situation and 


allow continuation of the program. 


b. “POODOO" alarms, designated by a five-digit alarm code with 2 
as the first digit, e.g., 21302. 


These alarms are caused by conditions which are less likely to be 
correctable than the ''BAILOUT" alarm conditions, e.g. inconsisten- 
cies in mathematical calculations. Software recovery procedures for 


POODOOS depend on program environment at the time: 


1.) If AVERAGE G is active, the BAILOUT" recovery procedure is 
followed. * 

2.) If an extended verb is active, the ''BAILOUT" recovery procedure 
is followed. * 


oy , 
When a POODOO abort condition triggers a BAILOUT recovery procedure, 
the POODOO alarm code is retained. 
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3.) If neither of the above applies, current program flow is termi- 
nated and a flashing V37 is displayed, requesting astronaut selection 


of a new program. 


3. —-~-Exit from a continuous "BAILOUT" loop can be accomplished by 
simultaneous depression of the RSET and MARK REJECT buttons, 

as in the case of a hardware restart loop. Exit.from either a hardware or 
a software restart loop by means of the above will cause reinitialization of 


the software by a Fresh Start. 


Restarts 


Hardware restarts will light the Restart lamp on the DSKY. 


4.3.5 Restart Protection 


With the exception of P06, the pulse torquing option of P52 and P54 __ 
(following ENTR on V50N25, Ri = 00013 until V50N25, R1 = 00014), and in 
P52 following PRO on V50N25 Ri = 00020 until termination of P52, all programs 
are restart protected. All routines which are called by a program are restart 
protected. Restart logic is designed such that significant information is not 
lost due toa restart. Extended verb routines and manually called displays 


are not restart protected. 


4.3.6 Channel 31, 33 Fail Bit Protection 


A new erasable C31FLWRD has been defined which is examined by the 
AGC to determine if the channel representations of the CMC MODE SWITCH, 
SC CONTROL SWITCH, OPTICS MODE SWITCH, or OPTICS ZERO SWITCH 
are to be used or if back-up indications are to be used. The erasable is of the 
form AxxDx.. 

If A = Oor 4, the CMC MODE SWITCH and SC CONTROL SWITCH indi- 
cations are assumed valid. Other values of A cause the AGC to use a back-up 
indication as shown in Table I. | | 

If D=O0or 4, the OPTICS MODE SWITCH and OPTICS ZERO SWITCH 
indications are assumed valid. Other values of D cause the AGC to use a back- 
up indication as shown in Table II. 7 

C31 FLWRD is padloaded as 0xx0x. If the astronaut desires to bypass 
the channel representation, he should load C31FLWRD via V21 NOQ1 to the 
values shown in Tables I and II. 
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A value 


JI now NH 


G&N control FREE 

G&N control ATT. HOLD 
G&N control AUTO 

SCS control FREE 

SCS control ATT. HOLD 
SCS control AUTO 


Table I | _ Table II 
Meaning D value Meaning. 

| OPTICS Mode CMC 
OPTICS Mode ZERO 
OPTICS Mode MANUAL 
OPTICS Mode CMC 
OPTICS Mode ZERO 
OPTICS Mode MANUAL 


Ia oO WwW Nw Fe 


4.4 AGC Logic/Ground/Crew Interface Diagrams Description 


These diagrams outline the detailed logic of the inter-relationship between 


the AGC/Crew/Ground. For ease of correction and reproduction the diagrams 


have been incorporated in a computer memory and are presented as a computer 


printout. 


The diagrams contain the following: 


1) Program Control - Indication of sequence interruptions and the follow- 


2) 


3) 


4) 


3) 


6) 


ing display notation: 


a) 
b) 


c) 


d) 


e) 


f) 


AGC 


PRIO (Priority) - denotes a priority display 

HOLD - denotes that the verb-noun and data will continue 

to be displayed until the astronaut takes DSKY action. 

TEMP HOLD (Temporary HOLD) - denotes that the duration of 
the display on the DSKY (non-flashing) is controlled by the AGC. 
POSS HOLD (Possible HOLD) - denotes that the display is a 
possible. path taken by the AGC. 

MON (Monitor) - denotes that the displayed data is automatically 
updated and displayed by the AGC. 

SNAP - denotes that the displayed data is not automatically 
updated (monitored) by the AGC. 


The sequence logic and interface relationships of the 


Ground 


Crew 


AGC logic, ground operations and crew activities. 


A line count is provided on the far right hand side of the page. 


The AGC Program (or Routine) number and the PROGRAM assembly 
specification are printed on the lower right hand corner of each page 
e.g. P40/SKYLARK. | 
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